Privacy policy

What we collect

• Your email address, and your password (stored hashed by our authentication provider) or the Google account or passkey you sign in with, to sign you in.
• Balances, transactions, investment holdings and loan details from accounts you choose to connect through Plaid, and from files you upload. An uploaded file is read once for its transactions and then discarded; Openbox Money doesn't keep the file itself, only its name.
• The categories, budgets, rules and notes you create; pay pages you save for your bills; your settings; and the answers you give the retirement readiness check.
• How you use Openbox Money: which pages you open, when, and for how long; whether you're on a phone, tablet or computer, and which browser; and how you sign in. Not what you type or search, not your financial details, and not your IP address.
• If something in Openbox Money breaks, an error report: what kind of error it was, where in Openbox Money it happened and which kind of page. Never the error's text, anything you entered, or your financial or account details.
• If someone invites you to Openbox Money, your first name and email address, to send the invitation.
• If your household subscribes to Premium: the plan, when it renews or ends, whether a payment is due, Stripe's customer and subscription references, and the amount and date of the first payment (to handle a refund). Your card details go to Stripe, not to Openbox Money.

How it's used

Only to provide Openbox Money to you: categorizing transactions, finding recurring bills and income, budgeting, tracking net worth, and sending the alert emails you choose. How you use Openbox Money is seen only by Openbox Money's owner, to learn which parts help and what to improve, and to pause bank connections nobody has used in 60 days. We don't sell your data, share it for advertising, or use it for lending decisions.

Service providers

Bank connections are provided by Plaid (see Plaid's end user privacy policy). Premium payments are handled by Stripe, which receives your email address, payment details and billing address and keeps its own records of the subscription and payments. Stripe collects the billing address for billing and tax records; Openbox Money doesn't store it. Data is stored with our database provider (Supabase) and the app is hosted by Vercel. When sign-in protection is on, Cloudflare Turnstile checks that a person, not a bot, is signing in, creating an account, resetting a password, using a passkey as a second step, or confirming Start over or Delete account in Settings; it sees your internet address and browser signals for that check, and they aren't used for advertising. Emails (alerts, invitations and account emails) are sent through Resend, which receives your email address and the message. If you sign in with Google, Google confirms who you are. Error reports go to Sentry, which, like any website, also sees the internet address a report is sent from. Prices for your watch list and assets come from market-data services (Finnhub, Tiingo, CoinGecko and Gold API), which receive only ticker symbols and asset names, never anything that identifies you. To show company logos, Openbox Money's servers look up icons on the company's own website, Google's icon service, and Wikidata and Wikimedia Commons, sending only the company's web address or name. When you choose “Pay bill”, your browser opens Google (or the page you saved) with the biller's name; when you check a home's value, it opens Zillow, or a Google search for Redfin, with the address you entered. Nothing else about you is sent. Each provider receives only what it needs to provide its service.Openbox Money does not send your data to AI services; if you choose to use your own AI assistant to categorize transactions, you download that file and share it under your own account.

Security

Openbox Money never receives your bank password. Bank access tokens and identifying details such as merchant names, descriptions and account names are encrypted before they are stored, all traffic uses HTTPS, and each person's data is isolated at the database level. Two-factor authentication is required before connecting a bank.

Retention and your choices

We keep your data while your account is active. A nightly cleanup deletes records of how you use Openbox Money, and records of finished email deliveries (including ones whose outcome couldn't be confirmed), once they're more than 13 months old; a delivery still in progress is kept until it finishes. Your household's owner can download a copy of the household's financial records (accounts, transactions, categories, budgets, goals and history) in Settings at any time. You can disconnect any bank at any time, which revokes Openbox Money's access with Plaid. If nobody in your household uses Openbox Money for 60 days, Openbox Money disconnects your banks the same way and deletes their access keys; your accounts and history stay, and you can reconnect when you're back. You can turn alert emails and optional features such as Pay bill shortcuts off in Settings. You can delete your account in Settings. If you're the only member of your household, that revokes all its bank connections and permanently deletes its data; if you share the household, you leave it, and its records and bank connections stay for the other members. Copies in our providers' backups expire on their backup schedule.

Contact

Questions or requests: support@openboxmoney.com